Timeline for Is using haveibeenpwned to validate password strength rational?
Current License: CC BY-SA 4.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 8 at 15:11 | comment | added | Mikko Rantalainen | Have I been owned database contains around 700M passwords. If we assume that total amount of passwords used is around 2^40 (3 magnitudes less than your assumption to be on the safe side), the database still contains only 0.008% of all the passwords. I think it's safe to blacklist those passwords for good, no matter if the password was seen once or thousands of times. | |
| Nov 15, 2019 at 21:21 | comment | added | Michael come lately | Took long enough, but I did, eventually! | |
| Jul 4, 2019 at 18:15 | comment | added | kutschkem | @Michael Sure, go ahead. | |
| Jul 3, 2019 at 16:14 | comment | added | Michael come lately | Would you mind if I make a new question specifically about your answer? I think it's interesting and underrated, and I'd like to see analysis by other users. | |
| S Jun 9, 2019 at 22:11 | history | suggested | Michael come lately | CC BY-SA 4.0 |
Formatting. Natural linking.
|
| Jun 9, 2019 at 21:42 | review | Suggested edits | |||
| S Jun 9, 2019 at 22:11 | |||||
| Jun 6, 2019 at 7:25 | history | answered | kutschkem | CC BY-SA 4.0 |